Mick Grove
02131a6d40
Merge pull request #181 from mongodb/development
...
preparing v1.74.0
2026-01-13 21:15:07 -08:00
Mick Grove
f4fc395554
preparing v1.74.0
2026-01-13 17:08:21 -08:00
Mick Grove
a93419bd33
preparing v1.74.0
2026-01-13 14:26:50 -08:00
Mick Grove
e10f6c6e2a
Apply suggestions from code review
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Mick Grove <mick.grove@mongodb.com>
2026-01-13 10:37:37 -08:00
Mick Grove
51588dbb6a
preparing v1.74.0
2026-01-13 10:32:09 -08:00
Akshay Jain
69d447dcc9
Add detection for short sk-None- prefixed OpenAI API keys
...
OpenAI issues keys with sk-None- prefix in both short (56 char) and long
(130+ char) formats. The existing openai.2 rule only matches long keys
with {100,} minimum length. This adds openai.3 to detect the short variant:
sk-None- followed by exactly 48 alphanumeric characters.
Fixes detection gap where trufflehog found valid keys that kingfisher missed.
2026-01-13 13:40:16 +05:30
Mick Grove
abe546fd59
preparing v1.74.0
2026-01-12 22:51:40 -08:00
Mick Grove
4f18541cb6
preparing v1.74.0
2026-01-12 22:50:05 -08:00
Akshay Jain
98d009deae
Add ScraperAPI key detection rule
...
Adds a new rule to detect ScraperAPI keys with:
- Pattern matching for 32-character alphanumeric keys
- Live validation against ScraperAPI endpoint
- Medium confidence with entropy check (min 3.5)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-07 13:38:53 +05:30
Mick Grove
b54e5329a2
v1.73.0
2026-01-02 13:29:45 -08:00
Mick Grove
7237a931d5
v1.73.0
2026-01-01 22:24:57 -08:00
Mick Grove
587dfc5892
- Fixed deduplication for dependency-provider rules so dependent validations run per blob
...
- Updated Artifactory rule entropy and added new artifactory rule
2025-12-21 22:07:45 -08:00
Trever McKee
093dbd58f6
Add JFrog Artifactory Reference Token rule.
2025-12-19 11:11:29 -08:00
Mick Grove
0b8f98ea16
fixed rule
2025-12-17 12:21:26 -08:00
Mick Grove
1a496ba01d
fixed rule
2025-12-17 12:03:51 -08:00
Mick Grove
db2c0c7b4e
- Improved Report Viewer layout
...
- Improved Salesforce rule
2025-12-17 11:57:35 -08:00
Mick Grove
9d76ebd46e
improved Jira support and fixed salesforce rule
2025-12-16 17:20:05 -08:00
Mick Grove
d155a33334
improved Jira support and working on salesforce rule, which is broken atm
2025-12-16 16:53:02 -08:00
Mick Grove
195f086afc
added dark mode for finding + access map viewer
2025-12-12 17:21:17 -08:00
Mick Grove
f1a77a736c
Updated precommit behavior and docs
2025-12-09 12:56:55 -08:00
Mick Grove
356ecc5748
Atlassian key update
2025-12-09 09:48:05 -08:00
Mick Grove
3c141f989a
updated entropy on several rules
2025-12-06 16:48:52 -08:00
Mick Grove
c59b7794ca
updated posthog rule
2025-12-06 12:58:45 -08:00
Mick Grove
f79b7f4b0c
added posthog
2025-12-05 21:45:24 -08:00
Mick Grove
9eff41f4ff
Added new rules for AWS Bedrock, Voyage.ai
2025-12-05 16:06:02 -08:00
Mick Grove
d15afe7cea
updated tests
2025-11-24 12:49:06 -08:00
Mick Grove
58b17c21ac
reducing false positives
2025-11-24 09:33:58 -08:00
Mick Grove
4fb8e616dc
added youtube rule
2025-11-23 20:00:19 -08:00
Mick Grove
a5877c4abe
added youtube rule
2025-11-23 18:30:02 -08:00
Mick Grove
4c53f2c246
added youtube rule
2025-11-23 17:23:52 -08:00
Mick Grove
ae01a24414
Added checksum to GitLab rule
2025-11-21 12:33:10 -08:00
Mick Grove
17e0ca3594
- Updating to support Bitbucket App Passwords
...
- Improved boundaries for several rules
- Added more rules
2025-11-20 16:33:28 -08:00
Mick Grove
c6b10f0b47
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-16 23:25:42 -08:00
Mick Grove
8d77f9d298
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:43:54 -08:00
Mick Grove
9853d346a6
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:23:06 -08:00
Mick Grove
f9d75eaadd
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
...
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
2025-11-15 08:11:25 -08:00
Mick Grove
554ca07803
added jdbc rule and validator
2025-11-12 22:26:29 -08:00
Mick Grove
2ed94f75d7
added jdbc rule and validator
2025-11-12 22:25:33 -08:00
Mick Grove
dca955a95c
v1.63.0
2025-11-10 18:47:51 -08:00
Mick Grove
06aa69b91d
Fixing CI builds for Windows on GitHub Actions
2025-11-09 17:06:20 -08:00
Mick Grove
22188647bb
Fixing CI builds for Windows on GitHub Actions
2025-11-09 16:50:29 -08:00
Mick Grove
4efdcc35e1
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-09 08:42:16 -08:00
Mick Grove
94a51c3d04
updated confluent rule with a checksum. Added zuplo rule with a checksum
2025-11-08 16:01:58 -08:00
Mick Grove
8aac161603
fixing rules
2025-11-08 10:48:00 -08:00
Mick Grove
a06bd0a32b
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 18:49:03 -08:00
Mick Grove
ccbbbad5bc
Added checksum comparisons to pattern_requirements, new suffix, crc32, and base62 Liquid filters, and verbose logging so mismatched checksums are skipped with context rather than reported as findings.
2025-11-07 16:31:24 -08:00
Mick Grove
9c4e459a14
updated ci
2025-11-06 16:22:35 -08:00
Mick Grove
dd55d45b9a
updated ci
2025-11-06 09:11:24 -08:00
Mick Grove
303f715a80
updated ci
2025-11-05 22:35:29 -08:00
Mick Grove
2f7410bcb4
updated ci
2025-11-05 18:30:21 -08:00
